high7.5
CVE-2019-11020
Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessab…
Impact
Lack of authentication in file-viewing components in DDRT Dashcom Live 2019-05-09 allows anyone to remotely access all claim details by visiting easily guessable dashboard/uploads/claim_files/claim_id_ URLs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ddrt | Dashcom Live Firmware | Version 2019-05-09 |